3rd party dependency is outdated
devfox-se opened this issue · 1 comments
devfox-se commented
Our project uses elasticsearch-curator
and celery
, both have dependency on click
3rd party module.
We want to upgrade celery from version 4 to version 5 due to security vulnerabiliy, yet due to dependency conflict between elasticsearch-curator <-> celery
the upgrade is impossible.
click<9.0,>=8.0.3 (from celery==5.2.3->-r requirements.in)
click<8.0,>=7.0 (from elasticsearch-curator==5.8.4->-r requirements.in)
click's latest version is 8.0.3
and it's backward compatible with version 7. would be amazing to see curator
updated to support latest version of click asap
untergeek commented
This is resolved with the release of Curator v6/v7/v8